$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fa384edc-a611-3e15-9f11-52686901fc5a.roa File: fa384edc-a611-3e15-9f11-52686901fc5a.roa (raw, json) Hash identifier: CGc1Jt7G0C2UTOk7olg5+7H+msV54XLtCFecNTIJHK8= Subject key identifier: 99:A9:E8:9B:10:D2:F4:01:B9:04:E7:59:92:4A:70:BC:CA:3C:26:CF Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CD25953B5FBEE823C5A900 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fa384edc-a611-3e15-9f11-52686901fc5a.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 172.243.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:25:95:3b:5f:be:e8:23:c5:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=2e1eef22-f207-4991-bab6-c5156eb30023 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:8f:e8:a2:67:fb:c2:a3:28:85:55:5c:2b:a5: 33:18:a1:91:30:65:b4:71:76:65:5c:b0:84:f2:51: cb:8b:04:15:35:3e:0d:96:dc:33:5d:f4:d0:4c:e7: 17:1a:17:86:c6:05:d3:bc:20:8b:76:c4:82:89:d1: a2:4f:c4:92:d7:f1:23:68:80:34:10:3f:5f:b4:b0: ed:a3:cf:54:1a:fb:2c:74:58:98:b3:47:01:be:c9: b0:67:24:28:64:d7:8d:32:69:27:f7:39:c2:06:71: 70:b0:38:6a:bc:01:6e:e3:49:10:55:e9:00:8a:a8: 1a:5e:78:b8:f0:bf:39:ca:42:86:b2:16:4a:63:6b: a7:7d:9f:05:59:d2:ea:6a:82:83:f1:f2:d9:3b:83: af:99:de:60:da:7c:06:10:9c:aa:9e:e9:48:1f:e6: e6:63:d2:37:31:4e:38:ee:fd:96:b9:3d:91:2c:16: 09:0a:84:07:a6:59:28:5e:0d:11:9a:ec:64:c5:57: 23:f1:26:a5:8e:9f:6f:1a:1a:a7:44:2a:51:68:4b: 4e:8b:b0:8d:de:d8:0d:09:c0:ee:c5:d8:78:62:44: 11:e7:94:d6:d3:5a:e3:cb:5d:ea:e6:74:19:f5:1c: c0:19:db:85:7c:56:03:c4:6b:07:47:72:cd:9b:0d: 9a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:A9:E8:9B:10:D2:F4:01:B9:04:E7:59:92:4A:70:BC:CA:3C:26:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fa384edc-a611-3e15-9f11-52686901fc5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:a7:e9:b4:f6:21:9d:04:d1:26:42:47:45:54:40:b6:a3:54: 52:48:52:e0:c8:f4:2b:0a:1a:2f:c8:2f:4c:fd:a9:ec:65:22: 57:6a:59:63:38:3f:42:6b:54:ee:d9:e4:31:74:f1:25:c5:ca: 80:21:d5:df:86:64:0d:f7:5b:94:40:cf:db:61:27:d8:0c:48: 72:51:0d:9f:dd:b6:c0:8c:a8:f4:18:93:c4:56:90:4c:4e:16: 56:49:f0:1f:e3:16:d4:c5:b9:3b:e4:06:90:23:cc:7b:92:34: ca:91:ad:7b:8f:75:e6:22:ab:cc:7d:cc:fe:a5:60:89:df:aa: c1:51:b1:da:2e:ad:07:8e:ab:8f:41:80:25:cf:32:c3:25:e9: da:62:ed:00:65:6e:6b:49:8f:b1:de:2c:5e:46:9f:72:69:ee: 57:e5:17:61:c5:8c:ed:83:1a:3a:35:e5:82:f3:ca:7a:d6:08: 91:c0:03:fe:07:39:1c:9b:1f:dc:4d:7d:32:70:cb:96:40:53: 12:c4:bb:fa:4a:eb:5b:a6:76:69:1d:06:ca:78:d3:25:63:a6: e6:bb:51:19:7b:3b:b0:43:75:43:fa:af:c1:dc:e7:57:ac:d7: 53:37:84:0c:a9:98:76:a3:86:b5:84:35:20:a8:85:8b:b1:6d: 14:bf:87:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzSWVO1++6CPFqQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MmUxZWVmMjItZjIwNy00OTkxLWJhYjYtYzUxNTZlYjMwMDIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4/oomf7wqMohVVcK6UzGKGRMGW0cXZlXLCE 8lHLiwQVNT4NltwzXfTQTOcXGheGxgXTvCCLdsSCidGiT8SS1/EjaIA0ED9ftLDt o89UGvssdFiYs0cBvsmwZyQoZNeNMmkn9znCBnFwsDhqvAFu40kQVekAiqgaXni4 8L85ykKGshZKY2unfZ8FWdLqaoKD8fLZO4Ovmd5g2nwGEJyqnulIH+bmY9I3MU44 7v2WuT2RLBYJCoQHplkoXg0RmuxkxVcj8Saljp9vGhqnRCpRaEtOi7CN3tgNCcDu xdh4YkQR55TW01rjy13q5nQZ9RzAGduFfFYDxGsHR3LNmw2a2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJmp6JsQ0vQBuQTnWZJKcLzKPCbPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZmEzODRlZGMtYTYxMS0z ZTE1LTlmMTEtNTI2ODY5MDFmYzVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPPlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABen6bT2IZ0E0SZCR0VUQLajVFJIUuDI9CsKGi/IL0z9qexlIldqWWM4 P0JrVO7Z5DF08SXFyoAh1d+GZA33W5RAz9thJ9gMSHJRDZ/dtsCMqPQYk8RWkExO FlZJ8B/jFtTFuTvkBpAjzHuSNMqRrXuPdeYiq8x9zP6lYInfqsFRsdourQeOq49B gCXPMsMl6dpi7QBlbmtJj7HeLF5Gn3Jp7lflF2HFjO2DGjo15YLzynrWCJHAA/4H ORybH9xNfTJwy5ZAUxLEu/pK61umdmkdBsp40yVjpua7URl7O7BDdUP6r8Hc51es 11M3hAypmHajhrWENSCohYuxbRS/h2E= -----END CERTIFICATE-----Generated at Sun Oct 26 09:55:02 2025 by rpki-client